Linux Kernel Vulnerability Affecting UNIX Domain Socket Management

CVE-2026-31673

What is CVE-2026-31673?

A vulnerability in the Linux kernel affects the management of UNIX domain sockets. Specifically, it involves the handling of UNIX_DIAG_VFS data, where the reference management for the socket is not correctly synchronized with the path reference. This can lead to instability when data is sent over the netlink attributes, potentially allowing for inconsistent states in the kernel's management of socket paths. The vulnerability has been addressed in a recent patch by ensuring that necessary references are held correctly during data lookups, enhancing the stability and reliability of UNIX domain socket operations.

References